Skip to main content

InvestigationReport

stygian_charon::types

Struct InvestigationReport

pub struct InvestigationReport {
    pub page_title: Option<String>,
    pub total_requests: u64,
    pub blocked_requests: u64,
    pub status_histogram: BTreeMap<u16, u64>,
    pub resource_type_histogram: BTreeMap<String, u64>,
    pub provider_histogram: BTreeMap<AntiBotProvider, u64>,
    pub marker_histogram: BTreeMap<String, u64>,
    pub top_markers: Vec<MarkerCount>,
    pub hosts: Vec<HostSummary>,
    pub suspicious_requests: Vec<HarRequestSummary>,
    pub aggregate: Detection,
    pub target_class: Option<TargetClass>,
}

Expand description

Full-featured HAR investigation output suitable for diffs and alerting.

Fields§

§page_title: Option<String>

URL/title from HAR page metadata when available.

§total_requests: u64

Total requests in the capture.

§blocked_requests: u64

Count of blocked/challenged requests (403/429).

§status_histogram: BTreeMap<u16, u64>

Status-code histogram.

§resource_type_histogram: BTreeMap<String, u64>

Resource-type histogram from HAR metadata.

§provider_histogram: BTreeMap<AntiBotProvider, u64>

Provider histogram inferred from signatures.

§marker_histogram: BTreeMap<String, u64>

Full marker histogram inferred from signatures.

§top_markers: Vec<MarkerCount>

Most frequent signature markers.

§hosts: Vec<HostSummary>

Top hosts by request volume.

§suspicious_requests: Vec<HarRequestSummary>

Suspicious requests (blocked/challenged or with known provider markers).

§aggregate: Detection

Aggregate provider classification.

§target_class: Option<TargetClass>

Target website class for SLO assessment (optional; defaults to Unknown).

Trait Implementations§

impl Clone for InvestigationReport

fn clone(&self) -> InvestigationReport

Returns a duplicate of the value. Read more

1.0.0 · Source§

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source. Read more

impl Debug for InvestigationReport

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter. Read more

impl<'de> Deserialize<'de> for InvestigationReport

fn deserialize<D>(deserializer: D) -> Result<Self, D::Error>
where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer. Read more

impl PartialEq for InvestigationReport

fn eq(&self, other: &InvestigationReport) -> bool

Tests for self and other values to be equal, and is used by ==.

1.0.0 · Source§

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for InvestigationReport

fn serialize<S>(&self, serializer: S) -> Result<S::Ok, S::Error>
where S: Serializer,

Serialize this value into the given Serde serializer. Read more

impl StructuralPartialEq for InvestigationReport

Auto Trait Implementations§

impl Freeze for InvestigationReport

impl RefUnwindSafe for InvestigationReport

impl Send for InvestigationReport

impl Sync for InvestigationReport

impl Unpin for InvestigationReport

impl UnsafeUnpin for InvestigationReport

impl UnwindSafe for InvestigationReport

Blanket Implementations§

impl<T> Any for T
where T: 'static + ?Sized,

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more

impl<T> Borrow<T> for T
where T: ?Sized,

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more

impl<T> BorrowMut<T> for T
where T: ?Sized,

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more

impl<T> CloneToUninit for T
where T: Clone,

unsafe fn clone_to_uninit(&self, dest: *mut u8)

🔬This is a nightly-only experimental API. (clone_to_uninit)

Performs copy-assignment from self to dest. Read more

impl<T> From<T> for T

fn from(t: T) -> T

Returns the argument unchanged.

impl<T> Instrument for T

fn instrument(self, span: Span) -> Instrumented<Self>

Instruments this type with the provided [Span], returning an Instrumented wrapper. Read more

fn in_current_span(self) -> Instrumented<Self>

Instruments this type with the current Span, returning an Instrumented wrapper. Read more

impl<T, U> Into<U> for T
where U: From<T>,

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

impl<T> PolicyExt for T
where T: ?Sized,

fn and<P, B, E>(self, other: P) -> And<T, P>
where T: Policy<B, E>, P: Policy<B, E>,

Create a new Policy that returns [Action::Follow] only if self and other return Action::Follow. Read more

fn or<P, B, E>(self, other: P) -> Or<T, P>
where T: Policy<B, E>, P: Policy<B, E>,

Create a new Policy that returns [Action::Follow] if either self or other returns Action::Follow. Read more

impl<T> ToOwned for T
where T: Clone,

type Owned = T

The resulting type after obtaining ownership.

fn to_owned(&self) -> T

Creates owned data from borrowed data, usually by cloning. Read more

fn clone_into(&self, target: &mut T)

Uses borrowed data to replace owned data, usually by cloning. Read more

impl<T, U> TryFrom<U> for T
where U: Into<T>,

type Error = Infallible

The type returned in the event of a conversion error.

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

Performs the conversion.

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.

impl<T> WithSubscriber for T

fn with_subscriber<S>(self, subscriber: S) -> WithDispatch<Self>
where S: Into<Dispatch>,

Attaches the provided Subscriber to this type, returning a [WithDispatch] wrapper. Read more

fn with_current_subscriber(self) -> WithDispatch<Self>

Attaches the current default Subscriber to this type, returning a [WithDispatch] wrapper. Read more

impl<T> DeserializeOwned for T
where T: for<'de> Deserialize<'de>,